Which act superseded the Computer Security Act of 1987?

• A. Clinger-Cohen Act
• B. FISMA of 2002
• C. Federal Information Security Improvement Act
• D. Privacy Act

Answer: (B)

FISMA of 2002 introduced a formal, risk-based information security program for all federal agencies, requiring annual assessments, ongoing monitoring, and the use of standardized security controls (aligned with NIST guidance). This modern framework expanded and centralized federal information security requirements in a way the earlier Computer Security Act of 1987 did not, making security practices more consistent, accountable, and adaptable to evolving tech and threats. The later act essentially replaced the older statute by providing the updated, comprehensive approach agencies must follow. The other options address different topics or purposes: the Clinger-C Cohen Act focuses on IT governance and acquisitions; the Privacy Act centers on individual privacy rights; and the Federal Information Security Improvement Act is an amendment that refined FISMA but does not supersede the 1987 act.